The Domain Name System (DNS) is the system that translates human-readable website names into IP addresses that computers use to locate each other on the Internet.
Humans prefer names like www.google.com, but computers communicate using IP addresses like 142.250.190.78.
Without DNS, users would need to remember the numeric IP address of every website they want to visit.
Instead of typing 142.250.190.78, you can type www.google.com. DNS automatically finds the correct IP address for you.
When you enter www.example.com into your browser, the following happens:
www.amazon.comamazon.com → 205.251.242.103DNS is distributed, meaning it uses many servers across the Internet.
The root DNS servers are the starting point of DNS lookup. They direct queries to the correct Top-Level Domain (TLD) servers.
Examples of TLDs include .com, .org, .net, .edu, and .gov.
These servers manage domains ending in extensions such as .com, .org, .net, and .edu.
These servers contain the actual IP address records for a domain.
example.com → 93.184.216.34
DNS servers store information in DNS records.
| Record Type | Purpose |
|---|---|
| A Record | Maps a domain to an IPv4 address |
| AAAA Record | Maps a domain to an IPv6 address |
| CNAME | Alias of another domain |
| MX Record | Mail server for a domain |
| NS Record | Name server for the domain |
A Record: example.com → 93.184.216.34
To make the Internet faster, DNS results are cached, which means they are stored temporarily.
Caching can happen in:
Benefits of caching:
DNS is designed to be:
DNS can also be involved in cyber attacks.
| Attack | Description |
|---|---|
| DNS Spoofing | Fake DNS response redirects users to the wrong site |
| DNS Cache Poisoning | Corrupts stored DNS data |
| DNS Amplification Attack | Uses DNS servers in DDoS attacks |
A major security improvement is DNSSEC (DNS Security Extensions), which helps verify that DNS responses are authentic.
| Term | Definition |
|---|---|
| DNS | System that converts domain names into IP addresses |
| Domain Name | Human-readable website name |
| IP Address | Numeric address used by computers |
| DNS Server | Computer that stores domain records |
| DNS Lookup | Process of finding an IP address from a domain name |
| DNS Cache | Temporary storage of DNS results |
DNS works like a phone contact list.
| Human Action | Internet Equivalent |
|---|---|
| Look up a friend's name | Type a domain name |
| Find their phone number | DNS finds the IP address |
| Call the number | Browser connects to the server |